Issue Summary:
Between 8:37 AM and 9:35 AM AEST on April 14, 2025, a platform change caused our system to apply login rate limits based on a shared gateway IP address, rather than individual user IPs. As a result, many valid login attempts were blocked once the shared threshold was reached.
Approximately 70% of users logging in via email/username and password were affected during this time. It did not impact users logging in via Single Sign-On(SSO) and social logins.
Resolution:
The issue has been fully resolved. We are also implementing additional safeguards to help prevent similar issues in the future.